@praxis.guard/auditor-cli 0.0.44 → 0.0.46

package/dist/policy/schema.d.ts

@@ -0,0 +1,35 @@
+import { z } from "zod";
+export declare const TierSchema: z.ZodEnum<{
+    READ: "READ";
+    MUTATE: "MUTATE";
+    DESTRUCTIVE: "DESTRUCTIVE";
+}>;
+export type Tier = z.infer<typeof TierSchema>;
+export declare const PoliciesV1Schema: z.ZodObject<{
+    tiers: z.ZodArray<z.ZodEnum<{
+        READ: "READ";
+        MUTATE: "MUTATE";
+        DESTRUCTIVE: "DESTRUCTIVE";
+    }>>;
+    dangerous_flags: z.ZodArray<z.ZodString>;
+    policies: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodEnum<{
+        READ: "READ";
+        MUTATE: "MUTATE";
+        DESTRUCTIVE: "DESTRUCTIVE";
+    }>>>>;
+    shell: z.ZodOptional<z.ZodObject<{
+        prelude_verbs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        privilege_verbs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PoliciesV1 = z.infer<typeof PoliciesV1Schema>;
+export type Classification = {
+    tool: string | null;
+    command_path: string | null;
+    verb: string | null;
+    tier: Tier;
+    matched: boolean;
+};
+export declare function ensureTiersComplete(tiers: readonly Tier[]): void;
+export declare function parsePoliciesV1Json(raw: unknown): PoliciesV1;
+//# sourceMappingURL=schema.d.ts.map

package/dist/policy/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,UAAU;;;;EAA4C,CAAC;AACpE,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;iBAU3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,QAOzD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAO5D"}

package/dist/policy/schema.js

@@ -0,0 +1,30 @@
+import { z } from "zod";
+export const TierSchema = z.enum(["READ", "MUTATE", "DESTRUCTIVE"]);
+export const PoliciesV1Schema = z.object({
+    tiers: z.array(TierSchema).nonempty(),
+    dangerous_flags: z.array(z.string()),
+    policies: z.record(z.string(), z.record(z.string(), z.record(z.string(), TierSchema))),
+    shell: z
+        .object({
+        prelude_verbs: z.array(z.string()).optional(),
+        privilege_verbs: z.array(z.string()).optional(),
+    })
+        .optional(),
+});
+export function ensureTiersComplete(tiers) {
+    const s = new Set(tiers);
+    for (const required of ["READ", "MUTATE", "DESTRUCTIVE"]) {
+        if (!s.has(required)) {
+            throw new Error(`policies.v1.json tiers missing: ${required}`);
+        }
+    }
+}
+export function parsePoliciesV1Json(raw) {
+    const parsed = PoliciesV1Schema.safeParse(raw);
+    if (!parsed.success) {
+        throw new Error(`Invalid policies: ${parsed.error.message}`);
+    }
+    ensureTiersComplete(parsed.data.tiers);
+    return parsed.data;
+}
+//# sourceMappingURL=schema.js.map

package/dist/policy/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAGpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IACrC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IACtF,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAChD,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAYH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAU,EAAE,CAAC;QAClE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/telemetry/agent-host.d.ts

@@ -6,6 +6,6 @@ import type { AgentId } from "../adapters/types.js";
  * Returns "unknown" when the env var is unset (legacy installs that pre-date
  * adapter tagging). See docs/auditor-cli-multi-agent-adapter-design.md § PR 3.
  */
-export type AgentHost = AgentId | "unknown";
+export type AgentHost = AgentId | "codex-app" | "unknown";
 export declare function resolveAgentHost(): AgentHost;
 //# sourceMappingURL=agent-host.d.ts.map

package/dist/telemetry/agent-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-host.d.ts","sourceRoot":"","sources":["../../src/telemetry/agent-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAI5C,wBAAgB,gBAAgB,IAAI,SAAS,CAI5C"}
+{"version":3,"file":"agent-host.d.ts","sourceRoot":"","sources":["../../src/telemetry/agent-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;AAU1D,wBAAgB,gBAAgB,IAAI,SAAS,CAI5C"}

package/dist/telemetry/agent-host.js

@@ -1,4 +1,10 @@
-const KNOWN_HOSTS = ["cursor", "claude-desktop", "claude-code", "unknown"];
+const KNOWN_HOSTS = [
+    "cursor",
+    "claude-desktop",
+    "claude-code",
+    "codex-app",
+    "unknown",
+];
 export function resolveAgentHost() {
     const raw = process.env.PRAXIS_AGENT_HOST?.trim();
     if (!raw)

package/dist/telemetry/agent-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-host.js","sourceRoot":"","sources":["../../src/telemetry/agent-host.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,GAAyB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAEjG,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAQ,WAAiC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC"}
+{"version":3,"file":"agent-host.js","sourceRoot":"","sources":["../../src/telemetry/agent-host.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,GAAyB;IACxC,QAAQ;IACR,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,SAAS;CACV,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAQ,WAAiC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@praxis.guard/auditor-cli",
-  "version": "0.0.44",
+  "version": "0.0.46",
   "private": false,
   "type": "module",
   "license": "MIT",